$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/79FEDD7CF73F11EF864B4012C4F9AE02.roa File: 79FEDD7CF73F11EF864B4012C4F9AE02.roa (raw, json) Hash identifier: lJx6MpSn+tcKnkFsLtMJCIqcEDChvrW3/fY/O155JxY= Subject key identifier: 5C:4D:4D:E8:3C:23:17:27:BE:A7:42:0E:0B:F5:D4:75:CE:46:B1:79 Certificate issuer: /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB Certificate serial: 04 Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/79FEDD7CF73F11EF864B4012C4F9AE02.roa Signing time: Sun 02 Mar 2025 08:22:27 +0000 ROA not before: Sun 02 Mar 2025 08:22:27 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140098 IP address blocks: 163.61.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83B6 Validity Not Before: Mar 2 08:22:27 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c41543-3508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:60:20:ae:13:a7:32:a9:a8:d4:b5:3a:ec: 56:1c:fc:71:69:cb:c6:0f:33:fb:7a:c8:df:91:00: 6d:16:cd:30:0b:bf:a2:a8:db:cd:d4:a7:c4:c1:1e: 7d:1c:c9:9d:1c:4d:eb:49:a4:e0:06:e5:39:14:b4: 85:51:21:ae:2c:1c:d8:1c:64:da:9e:b1:af:24:e7: a3:44:76:f3:33:06:cd:ba:c0:b7:4f:d6:18:ae:8b: 04:6a:d1:dc:f8:6c:77:3c:81:06:42:7a:87:82:0b: b1:24:cf:6b:a4:25:62:72:88:82:cc:c0:60:eb:94: e1:38:c5:bd:74:06:3e:5d:56:d9:14:00:1b:f1:0f: 9c:4f:0e:05:5d:de:7f:a9:3a:67:a0:2d:a0:44:2c: 7b:10:14:bd:81:93:6a:47:e3:64:8d:2a:22:75:bc: a9:9f:98:58:88:d2:a9:b4:5a:c3:32:64:50:f5:54: f4:3d:9d:3c:03:f2:ec:a5:08:7e:a3:c9:69:fc:39: 9f:9b:92:a0:78:40:2a:77:02:c8:46:d2:9b:6f:82: c7:14:d4:45:63:3f:bc:dd:0c:57:ca:2d:13:cf:be: d8:87:6c:00:11:dc:d5:ef:67:6e:9d:6d:69:2d:c9: ec:3f:bb:05:d0:17:66:78:6d:15:23:39:88:a9:10: 79:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4D:4D:E8:3C:23:17:27:BE:A7:42:0E:0B:F5:D4:75:CE:46:B1:79 X509v3 Authority Key Identifier: keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/79FEDD7CF73F11EF864B4012C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.216.0/24 Signature Algorithm: sha256WithRSAEncryption 39:f6:0b:70:68:bb:f1:50:9d:73:14:11:5e:2a:25:2e:cb:a2: 2d:70:ec:54:a1:02:cc:e0:25:6e:b5:d4:df:e2:ef:6e:cc:cb: 4f:74:3d:59:d6:fc:ea:e2:0a:26:fa:58:df:b4:71:0b:7c:aa: 71:c4:96:6f:3f:cc:71:47:46:83:80:9d:78:ab:f2:5d:ac:47: d9:c9:47:da:91:53:d6:a9:49:72:87:bf:65:5f:9b:b4:8b:74: 88:6b:00:56:83:fe:1c:3f:d4:70:b1:63:78:cd:10:40:80:a7: fe:cc:5b:6c:bd:12:85:07:1f:58:09:fb:e4:47:b4:0a:58:16: 06:7f:58:03:0b:bf:d5:3b:cd:38:66:47:49:d1:31:33:b0:a5: 33:59:ea:9d:08:53:46:43:35:fc:5d:5b:b4:d9:0a:5b:d3:ff: 79:11:ce:d9:fc:06:f6:8c:e5:13:78:18:81:cb:c8:56:38:4c: c9:3e:57:6d:46:76:85:c3:52:46:2f:5a:5f:82:67:e4:2f:cd: af:81:70:0c:8d:5b:a0:89:e5:6d:d2:f8:b6:29:74:e4:f7:98: 3a:9e:d9:11:80:59:56:45:f9:ca:a7:7b:9d:23:75:92:5e:52: 3f:0b:12:8e:9b:6d:eb:b4:74:54:46:72:18:a8:a1:e1:d1:c0: 0a:b4:10:d7 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODNCNjExMC8GA1UEBRMoRTQ2QjkzMTg1ODVBQzFFMDZDRjM4NEUyRUVDQzIxRjQ3 NDMzODlCQjAeFw0yNTAzMDIwODIyMjdaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzQxNTQzLTM1MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwXWAgrhOnMqmo1LU67FYc/HFpy8YPM/t6yN+RAG0WzTALv6Ko283Up8TBHn0c yZ0cTetJpOAG5TkUtIVRIa4sHNgcZNqesa8k56NEdvMzBs26wLdP1hiuiwRq0dz4 bHc8gQZCeoeCC7Ekz2ukJWJyiILMwGDrlOE4xb10Bj5dVtkUABvxD5xPDgVd3n+p OmegLaBELHsQFL2Bk2pH42SNKiJ1vKmfmFiI0qm0WsMyZFD1VPQ9nTwD8uylCH6j yWn8OZ+bkqB4QCp3AshG0ptvgscU1EVjP7zdDFfKLRPPvtiHbAAR3NXvZ26dbWkt yew/uwXQF2Z4bRUjOYipEHkrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUXE1N6Dwj Fye+p0IOC/XUdc5GsXkwHwYDVR0jBBgwFoAU5GuTGFhaweBs84Ti7swh9HQzibsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4M0I2L0U4RjE4QjIyRjcz RTExRUY5Njg3MzcwREM0RjlBRTAyLzVHdVRHRmhhd2VCczg0VGk3c3doOUhRemli cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUd1VEdGaGF3ZUJzODRUaTdzd2g5SFF6aWJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNCNi9FOEYxOEIyMkY3M0UxMUVGOTY4NzM3MERDNEY5QUUwMi83OUZFREQ3Q0Y3 M0YxMUVGODY0QjQwMTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKM92DANBgkqhkiG9w0BAQsFAAOCAQEAOfYLcGi78VCdcxQR XiolLsuiLXDsVKECzOAlbrXU3+LvbszLT3Q9Wdb86uIKJvpY37RxC3yqccSWbz/M cUdGg4CdeKvyXaxH2clH2pFT1qlJcoe/ZV+btIt0iGsAVoP+HD/UcLFjeM0QQICn /sxbbL0ShQcfWAn75Ee0ClgWBn9YAwu/1TvNOGZHSdExM7ClM1nqnQhTRkM1/F1b tNkKW9P/eRHO2fwG9ozlE3gYgcvIVjhMyT5XbUZ2hcNSRi9aX4Jn5C/Nr4FwDI1b oInlbdL4til05PeYOp7ZEYBZVkX5yqd7nSN1kl5SPwsSjptt67R0VEZyGKih4dHA CrQQ1w== -----END CERTIFICATE-----Generated at Sat Apr 5 23:46:55 2025 by rpki-client